How We Use and Disclose Your Protected Health Information

Treatment: Your information is used to provide, coordinate, and manage your mental health treatment. Information is shared with other providers only with written authorization, unless required by law.

Payment: This practice is private-pay only and does not bill insurance. Payment processing uses a HIPAA-compliant processor; credit card data is not stored in your clinical record.

Operations: Your information may be used for internal quality assurance and supervisory activities required by LPC-S licensure, conducted under HIPAA-compliant confidentiality agreements.

Required Disclosures: We are required by law to disclose PHI when: (1) you authorize it in writing; (2) required to prevent serious harm to yourself or others (Texas Health & Safety Code §611.004); (3) child or elder abuse is suspected (Texas Family Code §261.101); (4) a valid court order requires disclosure; or (5) required by federal or state law.

Your Rights Regarding Your Health Information

Right to Access: You may inspect and obtain copies of your clinical record in writing. We will respond within 30 days. A reasonable copying fee may apply.

Right to Amend: You may request corrections to inaccurate or incomplete records. Requests may be denied for records not created by this practice or records we determine are accurate.

Right to an Accounting: You may request a list of disclosures made for purposes other than treatment, payment, or operations.

Right to Restrict Disclosures: You may request restrictions on use of your information. We will honor agreed-upon restrictions in writing.

Right to Confidential Communications: You may request we contact you only in specific ways or at specific locations.

Right to a Copy of This Notice: You may request a copy of this Notice at any time.

Our Duties Regarding Your Health Information

Murad Counseling PLLC is required by law to: (1) maintain the privacy and security of your PHI; (2) provide you with this Notice; (3) notify you following a breach of unsecured PHI; and (4) abide by the terms of this Notice as currently in effect.

Telehealth Services and Technology Platforms

Telehealth sessions use HIPAA-compliant video platforms. Client records and scheduling are managed through SimplePractice, a HIPAA-compliant EHR. No method of internet transmission is 100% secure, and this practice takes all reasonable steps to protect your information.

Telehealth is provided in Texas, Washington, New Hampshire, and Florida. Texas Health & Safety Code §611 provides additional confidentiality protections for mental health records beyond federal HIPAA requirements.

How to File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with this practice or with the U.S. Department of Health and Human Services, Office for Civil Rights at hhs.gov/ocr/privacy. You will not be retaliated against for filing a complaint.

For concerns about professional conduct: Texas Behavioral Health Executive Council · 1801 Congress Ave., Ste. 7.300, Austin, TX 78701 · bhec.texas.gov